$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e668d255-3f02-3b25-a1bd-d5536b8a522f.roa File: e668d255-3f02-3b25-a1bd-d5536b8a522f.roa (raw, json) Hash identifier: 1EZlxSP+b5vO8Nh5GO4/cEXkpIcOpijjqScq/4WBEQo= Subject key identifier: 74:4B:4A:86:E4:B9:22:0C:E9:A3:6D:B9:22:33:E8:53:A8:AE:C6:7B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584979744DEA1B2CB005A0304C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e668d255-3f02-3b25-a1bd-d5536b8a522f.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 25485 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:4d:ea:1b:2c:b0:05:a0:30:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=77a9f657-7f82-491e-a2c9-04548c870c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:72:23:6e:e0:3b:03:06:ce:60:f7:82:18:d0: 5c:d5:da:2c:b7:f6:02:6b:69:51:80:7f:50:94:fb: c8:f8:7e:e2:98:45:64:9d:ed:d9:39:cc:0e:92:b9: e2:4b:94:84:80:ca:b9:c6:e8:71:3b:15:b2:27:19: 6f:f2:48:80:30:30:10:17:93:ed:0c:7d:89:4e:a5: 96:3c:ca:00:1b:f4:8f:be:c2:02:5c:bd:1c:85:2f: fc:ce:be:b4:ed:41:9b:75:0a:6a:04:0f:09:42:f3: 8c:5f:e0:ba:67:77:c4:74:57:ad:a2:89:01:90:73: 6a:e6:0a:e7:13:54:30:ac:fa:57:82:98:50:a4:92: 4d:39:b4:b1:8d:09:14:a0:67:9a:34:6a:0a:ff:2b: 92:fb:5e:be:86:6f:34:0d:29:cf:79:58:a9:42:08: 12:02:9d:54:e6:84:0d:d6:e3:7f:a3:f4:5a:0f:a6: b1:4b:13:7f:0f:a0:ed:0e:08:80:da:1e:42:d9:d6: c2:ed:51:29:c5:cd:76:49:6a:ec:05:23:cc:c7:8f: 91:95:a6:62:75:e3:02:92:d6:5f:e6:75:a3:1f:ac: ea:c0:2c:e1:0a:c9:47:6d:a1:a2:b8:41:21:37:93: 8b:84:e5:08:84:d1:f0:9b:37:fc:d2:4d:1c:9d:c7: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4B:4A:86:E4:B9:22:0C:E9:A3:6D:B9:22:33:E8:53:A8:AE:C6:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e668d255-3f02-3b25-a1bd-d5536b8a522f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:11:9c:61:16:9a:cf:07:c1:b4:8a:5c:a3:97:7a:eb:bb:a8: b9:d1:95:9c:39:b4:f8:fb:44:b2:fd:a7:34:9e:85:76:6b:c2: d7:81:8e:07:fa:b1:c8:4c:76:ed:03:82:7d:81:98:94:8f:f1: 76:9d:3e:1d:51:ac:2a:45:df:d9:f4:bb:20:73:cc:40:de:94: e2:8f:34:f9:17:db:1c:15:c9:cd:f7:10:28:40:4c:8c:19:b5: 22:f2:ef:ed:6c:09:de:9d:40:3d:91:f7:70:60:1c:1a:18:c4: 08:78:48:f6:4d:9d:05:cf:5a:d2:cf:20:69:1d:15:4c:43:c3: 84:50:02:48:0d:2d:40:99:6a:96:66:e6:61:6a:a5:ff:37:ea: b2:e1:de:a6:79:f0:ba:29:63:a5:f0:59:39:4b:a8:b9:38:73: df:b7:f7:7e:00:d6:ea:b8:e1:ec:c7:3e:1b:1b:4d:bf:a7:6e: 5d:bd:b0:df:22:34:9c:40:7c:37:82:11:50:5d:29:93:d0:16: 16:76:89:6c:39:28:a0:6e:ae:96:73:e6:b9:6d:05:48:77:dc: 19:38:dd:d4:60:cc:ff:b1:e1:cb:0a:4c:51:50:d4:45:cf:20: 66:8a:2f:a9:a1:bd:ce:c2:84:a9:8a:48:5b:29:88:00:00:83: f3:d5:e8:09 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dE3qGyywBaAwTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk NzdhOWY2NTctN2Y4Mi00OTFlLWEyYzktMDQ1NDhjODcwYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznIjbuA7AwbOYPeCGNBc1dost/YCa2lRgH9Q lPvI+H7imEVkne3ZOcwOkrniS5SEgMq5xuhxOxWyJxlv8kiAMDAQF5PtDH2JTqWW PMoAG/SPvsICXL0chS/8zr607UGbdQpqBA8JQvOMX+C6Z3fEdFetookBkHNq5grn E1QwrPpXgphQpJJNObSxjQkUoGeaNGoK/yuS+16+hm80DSnPeVipQggSAp1U5oQN 1uN/o/RaD6axSxN/D6DtDgiA2h5C2dbC7VEpxc12SWrsBSPMx4+RlaZideMCktZf 5nWjH6zqwCzhCslHbaGiuEEhN5OLhOUIhNHwmzf80k0cncc8zQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHRLSobkuSIM6aNtuSIz6FOorsZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTY2OGQyNTUtM2YwMi0z YjI1LWExYmQtZDU1MzZiOGE1MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0EZxhFprPB8G0ilyjl3rru6i50ZWcObT4+0Sy/ac0noV2a8LXgY4H +rHITHbtA4J9gZiUj/F2nT4dUawqRd/Z9Lsgc8xA3pTijzT5F9scFcnN9xAoQEyM GbUi8u/tbAnenUA9kfdwYBwaGMQIeEj2TZ0Fz1rSzyBpHRVMQ8OEUAJIDS1AmWqW ZuZhaqX/N+qy4d6mefC6KWOl8Fk5S6i5OHPft/d+ANbquOHsxz4bG02/p25dvbDf IjScQHw3ghFQXSmT0BYWdolsOSigbq6Wc+a5bQVId9wZON3UYMz/seHLCkxRUNRF zyBmii+pob3OwoSpikhbKYgAAIPz1egJ -----END CERTIFICATE-----Generated at Fri Apr 11 23:59:10 2025 by rpki-client